EUVD-2024-29750

Malicious code in bioql PyPI...

EUVD-2024-27270

Malicious code in bioql PyPI...

EUVD-2023-1879

Malicious code in bioql PyPI...

EUVD-2022-29673

Malicious code in bioql PyPI...

EUVD-2024-39261

Malicious code in bioql PyPI...

EUVD-2022-3443

Malicious code in bioql PyPI...

EUVD-2023-32669

Malicious code in bioql PyPI...

EUVD-2023-32246

Malicious code in bioql PyPI...

EUVD-2023-50130

Malicious code in bioql PyPI...

EUVD-2025-24446

Malicious code in bioql PyPI...

EUVD-2023-39916

Malicious code in bioql PyPI...

EUVD-2022-33620

Malicious code in bioql PyPI...

EUVD-2022-7397

Malicious code in bioql PyPI...

EUVD-2024-51956

Malicious code in bioql PyPI...

CVE-2025-9898

The cForms – Light speed fast Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation on the cformsapi function. This makes it possible for unauthenticated attackers to modify...

CVE-2025-9898

CVE-2025-9898 (cForms – Light speed fast Form Builder for WordPress) is a Cross-Site Request Forgery vulnerability present in all versions up to 3.0.0. The root cause is missing or incorrect nonce validation on the cforms_api function, enabling unauthenticated attackers to modify forms and their ...

CVE-2025-11060 Surrealdb: surrealdb is vulnerable to unauthorized data exposure via live query subscriptions

A flaw was found in the live query subscription mechanism of the database engine. This vulnerability allows record or guest users to observe unauthorized records within the same table, bypassing access controls, via crafted LIVE SELECT subscriptions when other users alter or delete records...

Novakon P series 安全漏洞

Novakon P series is a series of industrial panel PC operating pages from Taiwan, China-based Novakon Corporation. A security vulnerability exists in Novakon P series version V2001.A.C518o2, which stems from a path traversal flaw that could lead to root file system exposure and arbitrary file...

CVE-2025-35431

CVE-2025-35431 affects CISA Thorium: LDAP injection arises from not escaping user-controlled LDAP query strings. An authenticated remote attacker could modify LDAP authorization data (e.g., group memberships). Root cause is lack of escaping in LDAP queries; impact includes potential unauthorized ...

mysql: InnoDB unspecified vulnerability (CPU Jul 2025)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...